ELSA-2016-1539

ELSA-2016-1539 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2016-08-02

Description

[3.10.0-327.28.2.OL7]
- Oracle Linux certificates (Alexey Petrenko)

[3.10.0-327.28.2]
- [net] bridge: include in6.h in if_bridge.h for struct in6_addr (Jiri Benc) [1331285 1268057]
- [net] inet: defines IPPROTO_* needed for module alias generation (Jiri Benc) [1331285 1268057]
- [net] sync some IP headers with glibc (Jiri Benc) [1331285 1268057]

[3.10.0-327.28.1]
- [netdrv] e1000: Double Tx descriptors needed check for 82544 (Jarod Wilson) [1349448 1274170]
- [netdrv] e1000: Do not overestimate descriptor counts in Tx pre-check (Jarod Wilson) [1349448 1274170]
- [scsi] 3w-9xxx: version string touch (Tomas Henzl) [1348833 1322447]
- [scsi] 3w-9xxx: don't unmap bounce buffered commands (Tomas Henzl) [1348833 1322447]
- [scsi] 3w-9xxx: fix command completion race (Tomas Henzl) [1348833 1322447]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1348829 1344363]
- [fs] fanotify: fix notification of groups with inode & mount marks (Miklos Szeredi) [1348828 1308393]
- [fs] ovl: fix permission checking for setattr (Vivek Goyal) [1293980 1293981]
- [security] keys: potential uninitialized variable (David Howells) [1345935 1341352] {CVE-2016-4470}
- [tty] Invert tty_lock/ldisc_sem lock order (Herton R. Krzesinski) [1336823 1327403]
- [tty] Don't hold tty_lock for ldisc release (Herton R. Krzesinski) [1336823 1327403]
- [tty] Reset hupped state on open (Herton R. Krzesinski) [1336823 1327403]
- [tty] Fix hangup race with TIOCSETD ioctl (Herton R. Krzesinski) [1336823 1327403]
- [tty] Clarify ldisc variable (Herton R. Krzesinski) [1336823 1327403]
- [infiniband] security: Restrict use of the write() interface (Don Dutile) [1332553 1316685] {CVE-2016-4565}

[3.10.0-327.27.1]
- [md] raid5: check_reshape() shouldn't call mddev_suspend (Jes Sorensen) [1344313 1312828]
- [net] sctp: Potentially-Failed state should not be reached from unconfirmed state (Xin Long) [1347809 1333696]
- [net] sctp: fix the transports round robin issue when init is retransmitted (Xin Long) [1347809 1333696]
- [net] sctp: fix suboptimal edge-case on non-active active/retrans path selection (Xin Long) [1347809 1333696]
- [net] sctp: spare unnecessary comparison in sctp_trans_elect_best (Xin Long) [1347809 1333696]
- [net] sctp: improve sctp_select_active_and_retran_path selection (Xin Long) [1347809 1333696]
- [net] sctp: migrate most recently used transport to ktime (Xin Long) [1347809 1333696]
- [net] sctp: refactor active path selection (Xin Long) [1347809 1333696]
- [net] sctp: remove NULL check in sctp_assoc_update_retran_path (Xin Long) [1347809 1333696]
- [net] sctp: rework multihoming retransmission path selection to rfc4960 (Xin Long) [1347809 1333696]
- [net] sctp: retran_path not set properly after transports recovering (Xin Long) [1347809 1333696]
- [mm] memcg: fix endless loop caused by mem_cgroup_iter (Herton R. Krzesinski) [1344750 1297381]
- [scsi] qla2xxx: Set relogin flag when we fail to queue login requests (Chad Dupuis) [1347344 1273080]
- [x86] perf/x86/intel/uncore: Add Broadwell-EP uncore support (Jiri Olsa) [1347374 1259976]
- [x86] perf/x86/intel/uncore: Add Broadwell-DE uncore support (Jiri Olsa) [1348063 1306834]
- [lib] rhashtable: Do hashing inside of rhashtable_lookup_compare() (Phil Sutter) [1343639 1238749]
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341547 1308879] {CVE-2016-2143}
- [firmware] dmi_scan: Fix UUID endianness for SMBIOS >= 2.6 (Prarit Bhargava) [1340118 1294461]
- [misc] cxl: Export AFU error buffer via sysfs (Gustavo Duarte) [1343537 1275968]
- [misc] cxl: Poll for outstanding IRQs when detaching a context (Alexander Gordeev) [1338886 1332487]
- [misc] cxl: Keep IRQ mappings on context teardown (Alexander Gordeev) [1338886 1332487]
- [netdrv] mlx4_en: Fix endianness bug in IPV6 csum calculation (kamal heib) [1337431 1325358]
- [acpi] srat: fix SRAT parsing order with both LAPIC and X2APIC present (Prarit Bhargava) [1336821 1331394]

[3.10.0-327.26.1]
- [block] blk-mq: fix race between timeout and freeing request (David Milburn) [1347743 1288601]
- [x86] nmi: Fix use of unallocated cpumask_var_t (Jerry Snitselaar) [1346176 1069217]
- [x86] nmi: Perform a safe NMI stack trace on all CPUs (Jerry Snitselaar) [1346176 1069217]
- [kernel] printk: Add per_cpu printk func to allow printk to be diverted (Jerry Snitselaar) [1346176 1069217]
- [lib] seq: Add minimal support for seq_buf (Jerry Snitselaar) [1346176 1069217]
- [fs] ovl: use a minimal buffer in ovl_copy_xattr (Vivek Goyal) [1347235 1306358]
- [fs] ovl: allow zero size xattr (Vivek Goyal) [1347235 1306358]

[3.10.0-327.25.1]
- [fs] xfs: fix broken multi-fsb buffer logging (Brian Foster) [1344234 1334671]

[3.10.0-327.24.1]
- [net] udp: properly support MSG_PEEK with truncated buffers (Sabrina Dubroca) [1339115 1294384]

[3.10.0-327.23.1]
- [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1337513 1285792]
- [net] unix: avoid use-after-free in ep_remove_wait_queue (Paolo Abeni) [1337513 1285792]

Related CVEs

CVE-2016-4470

CVE-2015-8660

CVE-2016-2143

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-327.28.2.el7.src.rpm	e1f5eb64f70e21f161b124e98030493a5966c45c259a69103d9ca7fa989accf3	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-327.28.2.el7.src.rpm	e1f5eb64f70e21f161b124e98030493a5966c45c259a69103d9ca7fa989accf3	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-3.10.0-327.28.2.el7.src.rpm	e1f5eb64f70e21f161b124e98030493a5966c45c259a69103d9ca7fa989accf3	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-3.10.0-327.28.2.el7.x86_64.rpm	ccdc7d5ff0ded9e8bd631d2fea15f87d61088240da9eac1f78c9b3ba6a485b15	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-327.28.2.el7.x86_64.rpm	ccdc7d5ff0ded9e8bd631d2fea15f87d61088240da9eac1f78c9b3ba6a485b15	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-abi-whitelists-3.10.0-327.28.2.el7.noarch.rpm	1e2e6364a20d5f5524c956db5eeeb5259a41c75130ff66033b18f60f2d1a7308	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-abi-whitelists-3.10.0-327.28.2.el7.noarch.rpm	1e2e6364a20d5f5524c956db5eeeb5259a41c75130ff66033b18f60f2d1a7308	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-debug-3.10.0-327.28.2.el7.x86_64.rpm	f716e6e950f8a91b2afc824602f87b4fe2e0f3174c23c5875cd923711bf18e91	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-3.10.0-327.28.2.el7.x86_64.rpm	f716e6e950f8a91b2afc824602f87b4fe2e0f3174c23c5875cd923711bf18e91	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-debug-devel-3.10.0-327.28.2.el7.x86_64.rpm	a04cc3bc61b281148fa8ddfdd57ef8a97948373d0f5e08eae492df34b5d645ec	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-devel-3.10.0-327.28.2.el7.x86_64.rpm	a04cc3bc61b281148fa8ddfdd57ef8a97948373d0f5e08eae492df34b5d645ec	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-devel-3.10.0-327.28.2.el7.x86_64.rpm	9a85371de38213246e26631bdec21009769b60283606ac47b4546689894d8a3e	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-devel-3.10.0-327.28.2.el7.x86_64.rpm	9a85371de38213246e26631bdec21009769b60283606ac47b4546689894d8a3e	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-doc-3.10.0-327.28.2.el7.noarch.rpm	b5c1729e9e965d0ddd444da70c98f99a4e47198b088552e8a1610c83c8edb204	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-headers-3.10.0-327.28.2.el7.x86_64.rpm	5e97e06312df6b190d0e9537dc72017aa0123a67c56b849bad58b961e87a8cb1	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-headers-3.10.0-327.28.2.el7.x86_64.rpm	5e97e06312df6b190d0e9537dc72017aa0123a67c56b849bad58b961e87a8cb1	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-tools-3.10.0-327.28.2.el7.x86_64.rpm	9f8de4decaea5288db5c0649d213f0ccef4922078d17bf8b7908f414a5a33a5e	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-3.10.0-327.28.2.el7.x86_64.rpm	9f8de4decaea5288db5c0649d213f0ccef4922078d17bf8b7908f414a5a33a5e	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-tools-libs-3.10.0-327.28.2.el7.x86_64.rpm	6dd93fa6d101971f00de412ce5195f92bb2572bd5cf46c9f537467d913a7cbda	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-libs-3.10.0-327.28.2.el7.x86_64.rpm	6dd93fa6d101971f00de412ce5195f92bb2572bd5cf46c9f537467d913a7cbda	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-tools-libs-devel-3.10.0-327.28.2.el7.x86_64.rpm	faf432ca25037a4230c75b4a7380bdc342a0111fbfb885d4fae4064aefb85d09	ELSA-2025-1281	ol7_x86_64_optional_archive
	perf-3.10.0-327.28.2.el7.x86_64.rpm	e4c9ca0fb1993bdeb841cdf18b408afb384e299f247d4ec449316541528be801	ELSA-2025-20019	ol7_x86_64_latest_archive
	perf-3.10.0-327.28.2.el7.x86_64.rpm	e4c9ca0fb1993bdeb841cdf18b408afb384e299f247d4ec449316541528be801	ELSA-2025-20019	ol7_x86_64_u2_patch
	python-perf-3.10.0-327.28.2.el7.x86_64.rpm	dce3be36a8b7ec6893550f0e99ab5d85df4c6d683aef59915da467b0259643b8	ELSA-2025-20019	ol7_x86_64_latest_archive
	python-perf-3.10.0-327.28.2.el7.x86_64.rpm	dce3be36a8b7ec6893550f0e99ab5d85df4c6d683aef59915da467b0259643b8	ELSA-2025-20019	ol7_x86_64_u2_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team